798 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
0
votes
0
answers
62
views
Does libpcap support multi-threaded capture?
Does libpcap support multi-threaded capture? And can load balancing be achieved like AF-PACKET's FANOUT mechanism? How to set it up if possible.
0
votes
1
answer
153
views
Link-layer type and capturing multiples interfaces into a single pcap
I have a library which uses the libpcap to capture a network interface into a pcap file. I now would like to capture multiple interfaces into a single pcap file and ultimately into a pcapng file.
I ...
0
votes
0
answers
46
views
routing packets with mac-address with LAA bit
I use libpcap to send-receive packets between A and B, pcap_sendpacket() function.
In two type of connections
(1) A--router--B
(2) A--B
I need that in case (1) the packets will NOT go throuh the ...
0
votes
1
answer
94
views
PcapPlusPlus cross compilation
I use the PcapPlusPlus library to craft packets and use them in my unit tests for my C application. These packets are not sent over the network. I just use functions to create/add protocol headers and ...
0
votes
2
answers
334
views
Error "ModuleNotFoundError: No module named 'pylibpcap'"
I'm trying to use this Python libpcap library:
https://pypi.org/project/python-libpcap/
I have installed using:
sudo apt-get install libpcap-dev
pip3 install python-libpcap
but when I run the capture ...
0
votes
0
answers
58
views
Is it possible to open a socket on a char device in Linux?
I would like to use libpcap on my char device. libpcap establishes a socket connection to its devices. Is there a way to connect my char device via socket?
I already tried to just open the char device ...
1
vote
0
answers
153
views
pcap_open_live() returning address family not supported by protocol for all devices
I am trying to implement a packet sniffer using C ran on WSL with Ubuntu, and when calling pcap_open_live, for any device, returns: Couldn't open device: `pG��: socket: Address family not supported by ...
0
votes
0
answers
69
views
Problem with detect IP Layer When Pcap file have several Ethernet
I use the latest version of pcapplusplus(23.09). I have a pcap file that each frame has several Ethernet, like the below image:
I can't find the IP packet with the following commands. I think pcap ...
0
votes
1
answer
125
views
Facing Issue while writing data to a pcap file using C language
I would like to write a structure with one float member periodically in a for loop to a.pcap file. I want to have as many UDP packets in the resultant .pcap file as the loop iterates.
I've built the ...
0
votes
1
answer
909
views
How to fix "cannot find -lpcap" error when building Rust in Github actions?
I have a small Rust project on Github and I added a rust.yml file for the actions to build the project and run the tests automatically.
The build crashes while compiling libc v0.2.153 with the ...
1
vote
2
answers
388
views
libpcap disable monitor mode (C, macOS)
I have a function that enables monitor mode for a WiFi device on macOS using libpcap. This works, but currently the only way to set the WiFi device back to managed mode is to exit the process. I would ...
1
vote
1
answer
107
views
PCAP Memory Usage in C
I'm developing a program which uses the pcap library in C and currently running it on my mac. The program is hanging around 1.3Mb of memory usage based on the Activity Monitor. I've tested it as well ...
1
vote
1
answer
2k
views
tcpdump is buffering incoming packets and storing into pcap file
I have two VM connected to each other with 10G NIC card, now on one vm i am playing packets from the pcap file using libpcap in continuous stream, on other end of vm i am using tcpdump to capture the ...
0
votes
1
answer
177
views
What's the difference between `PCAP_IF_UP` and `PCAP_IF_RUNNING`?
I'm looking at using pcap to get information about available network interfaces. Looking at the documentation for pcap_findalldevices shows a list of flags that describe each interface. The two I'm ...
0
votes
1
answer
1k
views
Distinguish between VLAN-tagged and non-VLAN frames
I need to capture ethernet frames on a Linux-based system, for which there are no tools like wireshark or even tcpdump available.
And since I only need some specific, very small functionality, I am ...